Listing of the Claims 



At the time of the Action: 

Pending Claims: 1, 3-7, 12-19, 21, 26-29, and 31-33 

Withdrawn Claims: None 

Canceled Claims: 2, 8-11, 20, 22-25, and 30 
After this Response: 

Pending Claims: 1, 3-6, 15-18, 21, 26-29, and 31-33 

Amended Claims: None 

Canceled Claims: 2, 7-14, 19, 20, 22-25 and 30 

1. (Previously Presented) A kernel-level transaction system, comprising: 
a memory; 

one or more processors operatively coupled to the memory and disposed within one or 
more devices; 

a kernel-level transaction manager disposed within each device, each said kernel-level 
transaction manager including a plurality of kernel objects to implement a transaction having 
plural operations, wherein the plurality of kernel objects include a transaction object to represent 
a transaction, a resource manager object to represent a resource participating in the transaction, 
and an enlistment object to enlist participants in the transaction, wherein the transaction is 
performed at the kernel-level; and 

a security descriptor, applied to at least one of the kernel objects, to identify at least one 
user, to identify one of the operations of the transaction that may be performed on the kernel 
object to which the security descriptor is applied, and to identify a right indicating that the 
identified user is permitted or prohibited to perform the operation. 
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2. (Canceled) 



3. (Original) A system according to claim 1, wherein the security descriptor 
comprises at least one access control entry (ACE), which includes a security identifier (SID) and 
rights corresponding to the SID. 

4. (Previously Presented) A system according to claim 1, wherein the security 
descriptor is applied to the transaction object, and the operation identified by the security 
descriptor includes at least one of: 

set information regarding the transaction object, 
enlist the transaction object in the transaction, 

render data updates in connection with the transaction object durable, 

abort the operation on the transaction object, 

transmit data from the transaction object to another object, 

the current point of the transaction at the transaction object, and 

transmit data regarding the transaction to another device. 

5. (Previously Presented) A system according to claim 1, wherein the security 
descriptor is applied to the resource manager object, and the operation identified by the security 
descriptor includes at least one of: 

retrieve information regarding the resource manager object, 

set information regarding the resource manager object, 

determine the state of a transaction at a moment of transaction failure, 

enlist the resource manager object in a transaction, 
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register the resource manager object in the transaction, 

receive notification upon resolution of a transaction at the resource manager object, and 
set resource data in accordance with the transaction resolution. 

6. (Previously Presented) A system according to claim 1, wherein the security 
descriptor is applied to the enlistment object, and the operation identified by the security 
descriptor includes at least one of: 

get information regarding the enlistment object, 

set information regarding the enlistment object, 

determine a state of enlistments at a moment of transaction failure 

obtain and reference an enlistment key, 

rollback the transaction and to respond to notifications, and 

perform operations a superior transaction manager would perform. 

7. (Canceled) 

8. (Canceled) 

9. (Canceled) 

10. (Canceled) 

11. (Canceled) 
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12. (Canceled) 



13. (Canceled) 

14. (Canceled) 

15. (Previously Presented) A computer-readable medium having stored thereon an 
object attached to a kernel object, the object comprising: 

a first data entry identifying at least one user; 

a second data entry identifying an operation capable of being performed on the kernel 
object by the user identified by the first data entry, wherein the kernel object comprises a 
transaction object to represent a transaction, a resource manager object to represent a resource 
participating in the transaction and/or an enlistment object to enlist participants in the 
transaction, wherein the transaction is performed at the kernel-level; and 

a third data entry indicating a right for the user identified by the first data entry to 
perform the operation identified by the second data entry; 

wherein the object attached to the kernel object is a security descriptor. 

16. (Previously Presented) A computer-readable medium according to claim 15, 
wherein the kernel object is a transaction object, and the identified operation includes at least 
one of: 

set information regarding the transaction object, 
enlist the transaction object in the transaction, 

render data updates in connection with the transaction object durable, 
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abort the operation on the transaction object, 

transmit data from the transaction object to another object, 

save the current point of the transaction at the transaction object, and 

transmit data regarding the transaction to another device. 

17. (Previously Presented) A computer-readable medium according to claim 15, 
wherein the kernel object is a resource manager object, and the identified operation includes at 
least one of: 

retrieve information regarding the resource manager object, 

set information regarding the resource manager object, 

determine the state of a transaction at a moment of transaction failure, 

enlist the resource manager object in a transaction, 

register the resource manager object in the transaction, 

receive notification upon resolution of a transaction at the resource manager object, and 
set resource data in accordance with the transaction resolution. 

18. (Previously Presented) A computer-readable medium according to claim 15, 
wherein the kernel object is an enlistment object, and the identified operation includes at least 
one of: 

get information regarding the enlistment object, 

set information regarding the enlistment object, 

determine a state of enlistments at a moment of transaction failure, 

obtain and reference an enlistment key, 

rollback the transaction and to respond to notifications, and 
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perform operations a superior transaction manager would perform. 



19. (Canceled) 

20. (Canceled) 

21. (Previously Presented) A method of implementing a kernel-level transaction, 
comprising: 

attaching a security descriptor to at least one of a plurality of kernel objects utilized in a 
kernel-level transaction, wherein the security descriptor includes identification for at least one 
user, an operation to be performed on the at least one kernel object to which the security 
descriptor is attached, and a right indicating that the identified user is permitted or prohibited to 
perform the operation and each of the kernel objects comprise a transaction object, a resource 
manager object and/or an enlistment object; and 

performing an operation for a kernel-level transaction on the at least one object in 
accordance with the rights accorded by the security descriptor attached to the at least one object. 

22. (Canceled) 

23. (Canceled). 

24. (Canceled) 

25. (Canceled) 
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26. (Previously Presented) A method according to claim 21, wherein the operation 
identified by the security descriptor attached to the transaction object includes at least one of: 

set information regarding the transaction object, 

enlist the transaction object in the kernel-level transaction, 

render data updates in connection with the transaction object durable, 

abort the operation on the transaction object, 

transmit data from the transaction object to another object, 

save the current point of the kernel-level transaction at the transaction object, and 

transmit data regarding the kernel-level transaction to another device. 

27. (Previously Presented) A method according to claim 21, wherein the operation 
identified by the security descriptor attached to the resource manager object includes at least one 
of: 

retrieve information regarding the resource manager object, 
set information regarding the resource manager object, 

determine the state of a kernel-level transaction at a moment of transaction failure, 
enlist the resource manager object in a kernel-level transaction, 
register the resource manager object in the kernel-level transaction, 
receive notification upon resolution of a kernel-level transaction at the resource manager 
object, and 

set resource data in accordance with the kernel-level transaction resolution. 

28. (Previously Presented) A method according to claim 21, wherein the operation 
identified by the security descriptor includes at least one of: 
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get information regarding the enlistment object, 

set information regarding the enlistment object, 

determine a state of enlistments at a moment of transaction failure, 

obtain and reference an enlistment key, 

rollback the kernel-level transaction and to respond to notifications, and 
perform operations a superior transaction manager would perform. 

29. (Previously Presented) A kernel-level transaction system, comprising: 
a memory; 

one or more processors operatively coupled to the memory; 

means for implementing a kernel-level transaction among kernel objects, wherein the 
kernel objects include a transaction object to represent a transaction, a resource manager object 
to represent a resource participating in the transaction, and an enlistment object to enlist 
participants in the transaction, wherein the transaction is performed at the kernel level; and 

means for securing the transaction by applying a security descriptor to at least one of the 
kernel objects, 

wherein the security descriptor identifies at least one user, an operation to be performed 
on the kernel object to which the security descriptor is applied, and a right indicating that the 
identified user is permitted or prohibited to perform the operation. 

30. (Canceled) 
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31. (Previously Presented) A system according to claim 29, wherein 
descriptor is applied to the transaction object, and the operation identified by 
descriptor includes at least one of: 

set information regarding the transaction object, 
enlist the transaction object in the transaction, 

render data updates in connection with the transaction object durable, 
abort the operation on the transaction object, 
transmit data from the transaction object to another object, 
save the current point of the transaction at the transaction object, and 
transmit data regarding the transaction to another device. 

32. (Previously Presented) A system according to claim 29, wherein the security 
descriptor is applied to the resource manager object, and the operation identified by the security 
descriptor includes at least one of: 

retrieve information regarding the resource manager object, 

set information regarding the resource manager object, 

determine the state of a transaction at a moment of transaction failure, 

enlist the resource manager object in a transaction, 

register the resource manager object in the transaction, 

receive notification upon resolution of a transaction at the resource manager object, and 
set resource data in accordance with the transaction resolution. 



Iee@hayes pile 509.324.9256 - 10 - Attorney Docket No. MS1-1781US 

Serial No. 10/692,261 



the security 
the security 



33. (Previously Presented) A system according to claim 29, wherein the security 
descriptor is applied to the enlistment object, and the operation identified by the security 
descriptor includes at least one of: 

get information regarding the enlistment object, 

set information regarding the enlistment object, and 

determine a state of enlistments at a moment of transaction failure. 
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